Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35157 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulner… https://www.cve.org/CVERecord?id=CVE-2026-35157
Post summary
The entry lists CVE‑2026‑35157 with a brief description of a CSV‑related vulnerability but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-35157 CSV Formula Injection in Dell ECS and ObjectScale UI Leading to Remote Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35157
Post summary
CVE-2026-35157 is a newly disclosed CSV formula injection flaw in Dell ECS/ObjectScale that permits remote execution; no exploit code, patch or active exploitation details are present in the brief notice.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dell | elastic_cloud_storage | - | - | - |
| App | dell | objectscale | - | - | - |